GHSA-v994-63cg-9wj3 (CVE-2026-26066)

Details

A crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT.

Affected Packages(19 packages)

Magick.NET-Q16-AnyCPU

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-AnyCPU

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-OpenMP-arm64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-OpenMP-x64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-arm64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-x64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-x86

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-OpenMP-arm64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-OpenMP-x64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-OpenMP-x86

NuGet

Fixed in:

14.10.3

References

PACKAGE

https://github.com/ImageMagick/ImageMagick

WEB

https://github.com/ImageMagick/ImageMagick/commit/880057ce34f6da9dff2fe3b290bbbc45b743e613

WEB

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v994-63cg-9wj3

ADVISORY

https://github.com/advisories/GHSA-v994-63cg-9wj3

WEB

https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2026-26066